12/05/2005 18:28 581-989-9812 



FLEIT KAIN ET AL. 



PAGE 04/21 



IN THE CLAIMS 

1 . (previously presented) A method for controlling access to a data set, the method on a 
computer system comprising: 

retrieving a digital property rights list identifying at least a first associated digital 
property rights module and at least a second associated digital property rights module, 
wherein the at least first associated digital property rights module resides in a Digital 
Rights Management core, and wherein the at least second associated digital property 
rights module is an associated extension rights control module that is separate from the 
Digital Rights Management core; 

identifying the associated extension rights control module specified in the digital 
property rights list for generating an authorization for a desired type of access to a data 
set; 

requesting the authorization for the desired type of access to the data set 
through the associated extension rights control module; 

receiving the authorization from the associated extension rights control module if 
a set of usage conditions for the desired type of access Is satisfied; and 

granting, in response to receipt of the authorization, the desired type of access. 

2. (previously presented) The method of claim 1, further comprising authenticating the 
associated extension rights control module. 

3. (original) The method of claim 1 , wherein the data set comprises at least one of a 
multi-media presentation, an audio program, a database and a document data set. 

4. (original) The method of claim 1 , wherein the associated extension rights control 
module is installed prior to the step of requesting. 

5. (previously presented) The method of claim 1 , wherein the associated extension 
rights control module is located in at least one of the data set, a remote device and an 
external Digital Property Rights library. 
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6. (previously presented) A method for controlling access to a data set, the method 
comprising: 

accepting a rights request to a data set, wherein the data set is associated with a 
digital property rights list specified in a rights management language, wherein the digital 
property rights list identifies at least a first associated digital property rights module and 
at least a second associated digital property rights module, wherein the at least first 
associated digital property rights module resides in the Digital Rights Management core, 
and wherein the at least second associated digital property rights module is an 
associated extension rights control module that is separate from the Digital Rights 
Management core; 

determining if the rights request is contained within the digital property rights list; 

determining if the associated extension rights control module is required to 
authorize a requested right that is specified by the rights request; 

retrieving the associated extension rights module in response to a determination 
that the associated extension rights control module is required; 

requesting an authorization for the requested right from the associated extension 
rights module; and 

granting the desired type of access in response to the authorization. 

7. (previously presented) The method of claim 6, further comprising validating the digital 
property rights list. 

8. (previously presented) The method of claim 6, further comprising authenticating the 
associated extension rights control module. 

9. (original) The method of claim 6, wherein the rights management language is the 
XML markup language. 
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10. (previously presented) A system for controlling access to a data set, the system 
comprising: 

an associated extension rights control module, the associated extension rights 
control module being identified in a digital property rights list that also identifies a digital 
property rights module residing in a Digital Rights Management core, wherein the 
associated extension rights control module is separate from the Digital Rights 
Management core and generates an authorization for a desired type of access to a data 
set if a set of usage conditions for the desired type of access is satisfied; and 

a rights manager which requests the authorization for the desired type of access 
to the data set through the associated extension rights control module, and which 
grants, in response to receipt of the authorization, the desired type of access. 

1 1 . (original) The system of claim 10 f further comprising an extension rights control 
module verifier for authenticating the associated extension rights control module. 

12. (original) The system of claim 10, wherein the data set comprises at least one of a 
multi-media presentation, an audio program, a database and a document data set. 

13. (original) The system of claim 10, wherein the associated extension rights control 
module is loaded prior to a request for the desired type of access. 

14. (original) The system of claim 10, wherein the associated extension rights control 
module is located in at least one of a file containing the data set, a remote device and a 
downloadable module. 
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15. (previously presented) A system for controlling access to a data set, the system 
comprising: 

an associated extension rights control module, wherein the associated extension 
rights generates an authorization for a desired type of access to a data set if a set of 
usage conditions for the desired type of access is satisfied; and 
a rights manager for: 

accepting a rights request to a data set, wherein the data set comprises a 
digital property rights list specified in a rights management language, wherein the 
digital property rights list identifies at least the associated extension rights control 
module and a digital property rights module, and wherein the associated 
extension rights control module is separate from a Digital Rights Management 
core and the digital property rights module resides in the Digital Rights 
Management core; 

determining if the rights request is contained within the digital property 
rights list; 

determining if the associated extension rights control module is installed 
within the rights manager; 

retrieving the associated extension rights module in response to a 
determination that the associated extension rights control module is required; 

requesting an authorization for the requested right from the associated 
extension rights module; and 

granting the desired type of access in response to the authorization. 

16. (original) The system of claim 15, wherein the rights manager further verifies the 
digital property rights list. 

17. (original) The system of claim 15, wherein the rights manager further verifies the 
associated extension rights control module. 

18. (original) The system of claim 15, wherein the rights management language is the 
XML markup language. 

SOM92001001US1 Page 5 of 19 10/051,344 



PACE 7/21 * RCVD AT 12/5/2005 6:34:07 PM [Eastern Standard Time] * SVR:USPTO-EFXRF-6/30 * DNIS:2738300 * CSID:561 089 9812 * DURATION (mm-ss):07-38 



12/95/2005 18:28 561-989-9812 



FLEIT KAIN ET AL. 



PAGE 08/21 



19. (previously presented) A machine-readable medium encoded with a program for 
controlling access to a data set, the program containing instructions for performing the 
steps of: 

retrieving a digital property rights list that identifies at least a first associated 
digital property rights module and at least a second associated digital property rights 
module, wherein the at least first associated digital property rights module resides in a 
Digital Rights Management core, and wherein the at least second associated digital 
property rights module is an associated extension rights control module that is separate 
from the Digital Rights Management core; 

identifying the associated extension rights control module specified in the digital 
property rights list for generating an authorization for a desired type of access to a data 
set; 

requesting the authorization for the desired type of access to the data set 
through the associated extension rights control module; 

receiving the authorization from the associated extension rights control module if 
a set of usage conditions for the desired type of access is satisfied; and 

granting, in response to receipt of the authorization, the desired type of access. 

20. (original) The computer readable medium of claim 19, further comprising the step of 
authenticating the associated extension rights control module. 

21. (original) The computer readable medium of claim 19, wherein the data set 
comprises at least one of a multi-media presentation, an audio program, a database 
and a document data set. 

22. (original) The computer readable medium of claim 19, wherein the associated 
extension rights control module is installed prior to performing the step of requesting. 
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23. (original) The computer readable medium of claim 19, wherein the associated 
extension rights control module is located in at least one of a file containing the data 
set, a remote device and a downloadable module. 

24. (previously presented) A machine-readable medium encoded with a program for 
controlling access to a data set, the program containing instructions for performing the 
steps of: 

accepting a rights request to a data set, wherein the data set comprises a digital 
property rights list specified in a rights management language, wherein the digital 
property rights list identifies at least the associated extension rights control module and 
a digital property rights module, and wherein the associated extension rights control 
module is separate from a Digital Rights Management core and the digital property 
rights module resides in the Digital Rights Management core; 

determining if the rights request is contained within the digital property rights list; 

determining if the associated extension rights control module is required to 
authorize a requested right specified by the rights request; 

retrieving the associated extension rights module in response to a determination 
that the associated extension rights control module is required; 

requesting an authorization for the requested right from the associated extension 
rights module; and 

granting the desired type of access in response to the authorization. 

25. (original) The computer readable medium of claim 24, further comprising the step of 
validating the digital property rights list. 

26. (original) The computer readable medium of claim 24, further comprising the step of 
authenticating the associated extension rights control module. 

27. (original) The computer readable medium of claim 24, wherein the rights 
management language is the XML markup language. 
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